The increasing complexity of cybercrime requires more adaptive evidentiary approaches capable of addressing the dynamic and interconnected nature of digital evidence. This study aims to examine the role of data forensics in cybercrime proof through the integration of Social Network Analysis (SNA) as a network-based analytical approach. The research employs a mixed methods approach with an explanatory sequential design, combining quantitative analysis of 120 case files with qualitative insights obtained from in-depth interviews with prosecutors, investigators, and digital forensic experts. The findings reveal that digital evidence forms complex network structures, where entities with high centrality values play significant roles as key actors and intermediaries in cybercrime activities. The application of SNA enables a more objective identification of actors’ involvement patterns and strengthens evidentiary construction by analyzing the interconnections among digital evidence. Theoretically, this study extends the paradigm of criminal evidence by incorporating a relational dimension into evidentiary analysis. Methodologically, it offers novelty by integrating SNA into criminal law research, an approach that remains underexplored, particularly in prosecutorial practices in Indonesia. The findings provide important implications for developing a more data-driven and adaptive evidentiary system in addressing cybercrime.